Skip to content
OpenAdvisories

Package · Packagist

nette/application

1 known vulnerabilities.

1 result · Feed

  • High 8.7
    CVE-2020-15227 Public exploit EPSS 34%

    Remote Code Execution vulnerability

    Nette versions before 2.0.19, 2.1.13, 2.2.10, 2.3.14, 2.4.16, 3.0.6 are vulnerable to an code injection attack by passing specially formed parameters to URL that may possibly leading to RCE. Nette is a PHP/Composer MVC Framework.